VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
293833 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-46312 | redhat_vex | kernel: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap | known affected: 124 known not affected: 150 | 2026-07-08T15:08:29+00:00 | Vulnerability · Source |
| CVE-2025-54500 | redhat_vex | nginx: HTTP/2 Vulnerability | known not affected: 77 | 2026-07-08T15:08:28+00:00 | Vulnerability · Source |
| CVE-2026-46309 | redhat_vex | kernel: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise | known affected: 184 known not affected: 90 | 2026-07-08T15:06:02+00:00 | Vulnerability · Source |
| CVE-2026-32226 | redhat_vex | dotnet: .NET Framework: Denial of Service via race condition | known not affected: 133 | 2026-07-08T15:04:03+00:00 | Vulnerability · Source |
| CVE-2026-50229 | redhat_vex | tomcat: Apache Tomcat: Cross-Site Scripting vulnerability in number guess example | fixed: 2 known affected: 78 known not affected: 3 | 2026-07-08T14:58:37+00:00 | Vulnerability · Source |
| CVE-2025-59464 | redhat_vex | nodejs: Nodejs memory leak | fixed: 16 known affected: 6 known not affected: 68 | 2026-07-08T14:58:33+00:00 | Vulnerability · Source |
| CVE-2025-59466 | redhat_vex | nodejs: Nodejs denial of service | fixed: 456 | 2026-07-08T14:58:29+00:00 | Vulnerability · Source |
| CVE-2026-21636 | redhat_vex | nodejs: Nodejs network segmentation bypass | fixed: 16 known not affected: 74 | 2026-07-08T14:58:28+00:00 | Vulnerability · Source |
| CVE-2026-21637 | redhat_vex | nodejs: Nodejs denial of service | fixed: 567 | 2026-07-08T14:58:17+00:00 | Vulnerability · Source |
| CVE-2025-68972 | redhat_vex | gnupg: GnuPG: Signature bypass via form feed character in signed messages | fixed: 3 known affected: 15 | 2026-07-08T14:58:14+00:00 | Vulnerability · Source |
| CVE-2026-55955 | redhat_vex | tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor | fixed: 4 known affected: 78 known not affected: 2 | 2026-07-08T14:58:11+00:00 | Vulnerability · Source |
| CVE-2026-53148 | redhat_vex | kernel: thunderbolt: Clamp XDomain response data copy to allocation size | known not affected: 274 | 2026-07-08T14:54:57+00:00 | Vulnerability · Source |
| CVE-2025-64503 | redhat_vex | cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox | fixed: 4 known affected: 14 | 2026-07-08T14:52:57+00:00 | Vulnerability · Source |
| CVE-2025-11230 | redhat_vex | haproxy: denial of service vulnerability in HAProxy mjson library | fixed: 98 known affected: 9 known not affected: 17 | 2026-07-08T14:52:02+00:00 | Vulnerability · Source |
| CVE-2025-12818 | redhat_vex | postgresql: libpq: libpq undersizes allocations, via integer wraparound | fixed: 3265 known affected: 11 known not affected: 40 | 2026-07-08T14:47:53+00:00 | Vulnerability · Source |
| CVE-2026-53362 | microsoft_vex | ipv6: account for fraggap on the paged allocation path | fixed: 1 known affected: 1 | 2026-07-08T14:47:02+00:00 | Vulnerability · Source |
| CVE-2026-53361 | microsoft_vex | af_unix: Set gc_in_progress to true in unix_gc(). | fixed: 1 known affected: 1 | 2026-07-08T14:46:54+00:00 | Vulnerability · Source |
| CVE-2025-13699 | redhat_vex | mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation | fixed: 2284 known not affected: 19 | 2026-07-08T14:46:39+00:00 | Vulnerability · Source |
| CVE-2026-53325 | microsoft_vex | agp/amd64: Fix broken error propagation in agp_amd64_probe() | fixed: 1 known affected: 1 | 2026-07-08T14:43:54+00:00 | Vulnerability · Source |
| CVE-2026-52909 | microsoft_vex | ip6_vti: set netns_immutable on the fallback device. | fixed: 1 known affected: 1 | 2026-07-08T14:43:42+00:00 | Vulnerability · Source |
| CVE-2025-58186 | redhat_vex | golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http | fixed: 8 known affected: 73 known not affected: 50 under investigation: 1395 | 2026-07-08T14:43:00+00:00 | Vulnerability · Source |
| CVE-2026-53163 | microsoft_vex | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | fixed: 1 known affected: 2 | 2026-07-08T14:43:00+00:00 | Vulnerability · Source |
| CVE-2025-57812 | redhat_vex | cups: CUPS-Filters: Information disclosure and data corruption via crafted TIFF image file processing | fixed: 4 known affected: 15 | 2026-07-08T14:42:55+00:00 | Vulnerability · Source |
| CVE-2025-43718 | redhat_vex | poppler: Poppler stack overflow | fixed: 4 known affected: 11 known not affected: 48 | 2026-07-08T14:42:54+00:00 | Vulnerability · Source |
| CVE-2026-53138 | microsoft_vex | drm/amd/display: Bound VBIOS record-chain walk loops | fixed: 1 known affected: 2 | 2026-07-08T14:42:49+00:00 | Vulnerability · Source |
| CVE-2026-53157 | microsoft_vex | net: phonet: free phonet_device after RCU grace period | fixed: 1 known affected: 1 under investigation: 1 | 2026-07-08T14:42:25+00:00 | Vulnerability · Source |
| CVE-2026-52928 | microsoft_vex | af_unix: Reject SIOCATMARK on non-stream sockets | fixed: 1 known affected: 2 | 2026-07-08T14:42:16+00:00 | Vulnerability · Source |
| CVE-2026-53151 | microsoft_vex | rxrpc: Fix the ACK parser to extract the SACK table for parsing | fixed: 1 known affected: 2 | 2026-07-08T14:41:57+00:00 | Vulnerability · Source |
| CVE-2026-40215 | redhat_vex | openvpn: OpenVPN: Server crash or memory leak due to race condition and use-after-free | known not affected: 1 | 2026-07-08T14:32:11+00:00 | Vulnerability · Source |
| CVE-2025-14178 | redhat_vex | php: heap-based buffer overflow in array_merge() | fixed: 4178 known not affected: 83 | 2026-07-08T13:47:52+00:00 | Vulnerability · Source |
| CVE-2026-1642 | redhat_vex | nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections | fixed: 951 known affected: 1 known not affected: 72 | 2026-07-08T13:41:54+00:00 | Vulnerability · Source |
| CVE-2026-53236 | redhat_vex | kernel: tcp: restrict SO_ATTACH_FILTER to priv users | known affected: 274 | 2026-07-08T13:37:06+00:00 | Vulnerability · Source |
| CVE-2026-53238 | redhat_vex | kernel: netlabel: validate unlabeled address and mask attribute lengths | known affected: 274 | 2026-07-08T13:26:53+00:00 | Vulnerability · Source |
| CVE-2026-11610 | redhat_vex | 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND | fixed: 486 known affected: 5 known not affected: 1 | 2026-07-08T13:01:15+00:00 | Vulnerability · Source |
| CVE-2026-56403 | redhat_vex | libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts | known affected: 7 under investigation: 21 | 2026-07-08T12:31:10+00:00 | Vulnerability · Source |
| CVE-2026-2641 | redhat_vex | ctags: ctags: Denial of Service due to uncontrolled recursion | known affected: 1 known not affected: 7 | 2026-07-08T12:29:30+00:00 | Vulnerability · Source |
| CVE-2025-38073 | redhat_vex | kernel: block: fix race between set_blocksize and read paths | known affected: 232 known not affected: 42 | 2026-07-08T12:29:24+00:00 | Vulnerability · Source |
| CVE-2022-50377 | redhat_vex | kernel: ext4: check and assert if marking an no_delete evicting inode dirty | fixed: 279 known affected: 112 known not affected: 76 | 2026-07-08T12:29:22+00:00 | Vulnerability · Source |
| CVE-2025-38096 | redhat_vex | kernel: Linux Kernel: Denial of Service in iwlwifi due to improper firmware error handling | known affected: 260 known not affected: 14 | 2026-07-08T12:29:17+00:00 | Vulnerability · Source |
| CVE-2026-57062 | redhat_vex | GnuPG: Incorrect cryptographic message parsing | known affected: 16 | 2026-07-08T12:29:14+00:00 | Vulnerability · Source |
| CVE-2026-14684 | redhat_vex | org.hdrhistogram/HdrHistogram: HdrHistogram: HdrHistogram: Denial of Service via uncontrolled memory allocation in decodeFromByteBuffer | fixed: 7 known affected: 12 | 2026-07-08T12:29:12+00:00 | Vulnerability · Source |
| CVE-2026-57234 | redhat_vex | nokogiri: Nokogiri: Server-Side Request Forgery (SSRF) and XML External Entity (XXE) via improper enforcement of NONET parse option | known not affected: 17 | 2026-07-08T12:29:08+00:00 | Vulnerability · Source |
| CVE-2022-50833 | redhat_vex | kernel: Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works | fixed: 201 known affected: 36 known not affected: 152 | 2026-07-08T12:28:45+00:00 | Vulnerability · Source |
| CVE-2022-50709 | redhat_vex | kernel: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() | known affected: 198 known not affected: 76 | 2026-07-08T12:28:40+00:00 | Vulnerability · Source |
| CVE-2022-50217 | redhat_vex | kernel: Linux kernel (FUSE): Data corruption or Denial of Service due to a race condition during file operations | known affected: 42 known not affected: 232 | 2026-07-08T12:28:36+00:00 | Vulnerability · Source |
| CVE-2023-53788 | redhat_vex | kernel: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() | known affected: 198 known not affected: 76 | 2026-07-08T12:28:28+00:00 | Vulnerability · Source |
| CVE-2022-50838 | redhat_vex | kernel: net: stream: purge sk_error_queue in sk_stream_kill_queues() | known affected: 170 known not affected: 104 | 2026-07-08T12:28:21+00:00 | Vulnerability · Source |
| CVE-2026-11774 | redhat_vex | 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow | fixed: 486 known affected: 1 known not affected: 5 | 2026-07-08T12:26:57+00:00 | Vulnerability · Source |
| CVE-2022-50853 | redhat_vex | kernel: NFSv4: Fix a credential leak in _nfs4_discover_trunking() | known affected: 170 known not affected: 104 | 2026-07-08T12:24:26+00:00 | Vulnerability · Source |
| CVE-2025-38134 | redhat_vex | kernel: Kernel: Denial of Service due to null pointer dereference in USB ACPI module | known affected: 212 known not affected: 62 | 2026-07-08T12:24:18+00:00 | Vulnerability · Source |